diff --git a/content/schedule.md b/content/schedule.md index 2f98762..9ae0bf6 100644 --- a/content/schedule.md +++ b/content/schedule.md @@ -4,36 +4,36 @@ title: "Schedule" | Time/Zoom | Topic | Prepare Reading | Additional Reading | Presenter | Notes | Recording | | ----------------------------- | ---------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------- | ----- | --------- | -| JAN. 22: 5:00pm PST,
JAN. 23: 9:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Administrative | N/A | N/A | Mossaka & Wen | N/A | N/A | -| JAN. 29: 5:00pm PST,
JAN. 30: 9:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Background and Virtualization | [Comet Book Chapter on Virtual Machine Monitors](http://pages.cs.wisc.edu/~remzi/OSTEP/vmm-intro.pdf) | 1. Formal Requirements for Virtualizable Third Generation Architectures (Comm ACM 1974);
2. Disco: Running Commodity Operating Systems on Scalable Multiprocessors (TOCS'97);
3. Scale and Performance in the Denali Isolation Kernel | N/A | N/A | N/A | -| FEB. 5: 5:00pm PST,
FEB. 5: 9:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| FEB. 12: 5:00pm PST,
FEB. 13: 9:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Virtulization CPU | [A Comparison of Software and Hardware Techniques for x86 Virtualization (ASPLOS'06)](https://pdos.csail.mit.edu/6.828/2018/readings/adams06vmware.pdf) | 1. [The Evolution of an x86 Virtual Machine Monitor](http://course.ece.cmu.edu/~ece845/docs/vmware-evolution.pdf);
2. Software Techniques for Avoiding Hardware Virtualization Exits;
3. Embra: Fast and Flexible Machine Simulation;
4. Fast Dynamic Binary Translation for the Kernel;
5. Enabling Intel Virtualization Technology Features and Benefits | N/A | N/A | N/A | -| FEB. 19: 5:00pm PST,
FEB. 20: 9:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| FEB. 26: 5:00pm PST,
FEB. 27: 9:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Virtualization Memory | 1. The first three pages of [Performance Evaluation of Intel EPT Hardware Assist](https://www.vmware.com/pdf/Perf_ESX_Intel-EPT-eval.pdf);
2. At least the first four sections of [Memory Resource Management in VMware ESX Server (OSDI'02)](https://www.vmware.com/pdf/usenix_resource_mgmt.pdf) | Difference Engine: Harnessing Memory Redundancy in Virtual Machines | N/A | N/A | N/A | -| MAR. 4: 5:00pm PST,
MAR. 5: 9:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| MAR. 11: 5:00pm PST,
MAR. 12: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Virtualization I/O | 1. First three sections of [virtio: Towards a De-Facto Standard For Virtual I/O Devices](https://ozlabs.org/~rusty/virtio-spec/virtio-paper.pdf);
2. First three sections of [High Performance Network Virtualization with SR-IOV](http://zhenxiao.com/read/SR-IOV.pdf);
3. [Network Virtualization Overview](https://sdn.systemsapproach.org/netvirt.html) | 1. vIC: Interrupt Coalescing for Virtual Machine Storage Device IO;
2. ELI: Bare-Metal Performance for I/O Virtualization;
3. [Virtualizing I/O Devices on VMware Workstation's Hosted Virtual Machine Monitor (ATC'01)](https://www.vmware.com/pdf/usenix_io_devices.pdf);
4. [Network Virtualization in Multi-tenant Datacenters (NSDI'14)](https://www.usenix.org/conference/nsdi14/technical-sessions/presentation/koponen);
5. [The Design and Implementation of Open vSwitch (NSDI'15)](https://www.openvswitch.org/support/papers/nsdi2015.pdf%20target=) | N/A | N/A | N/A | -| MAR. 18: 5:00pm PST,
MAR. 19: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| MAR. 25: 5:00pm PST,
MAR. 26: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Container Basics | [Understanding and Hardening Linux Containers](https://research.nccgroup.com/wp-content/uploads/2020/07/ncc_group_understanding_hardening_linux_containers-1-1.pdf) (mainly Ch 2 to Ch 5; you can ignore many of the details in these chapters. Read Ch 1 for more background on virtualization. Read other chapters if you are interested in security.) | 1. [LXC/LXD](https://linuxcontainers.org/);
2. [Docker](https://docs.docker.com/engine/docker-overview/);
3. [Understanding Security Implications of Using Containers in the Cloud](https://www.usenix.org/system/files/conference/atc17/atc17-tak-paper.pdf)
4. [Container Security: Issues, Challenges, and the Road Ahead](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8693491);
5. [Slacker: Fast Distribution with Lazy Docker Containers](https://www.usenix.org/node/194431) | N/A | N/A | N/A | -| APR. 1: 5:00pm PST,
APR. 2: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| APR. 8: 5:00pm PST,
APR. 9: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Kubernetes and gVisor | [Kubernetes](https://kubernetes.io/docs/tutorials/kubernetes-basics/) and [gVisor](https://gvisor.dev/docs) | 1. [Borg, Omega, and Kubernetes (Google)](https://storage.googleapis.com/pub-tools-public-publication-data/pdf/44843.pdf);
2. [The True Cost of Containing: A gVisor Case Study](https://www.usenix.org/system/files/hotcloud19-paper-young.pdf);
3. [Container Isolation at Scale (Introducing gVisor) - Dawn Chen & Zhengyu He, Google](https://www.youtube.com/watch?v=pWyJahTWa4I);
4. [Nabla Containers](https://nabla-containers.github.io/) | N/A | N/A | N/A | -| APR. 15: 5:00pm PST,
APR. 16: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| APR. 22: 5:00pm PST,
APR. 23: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Serverless Computing | 1. Pages 3 to 8 of [Cloud Programming Simplified: A Berkeley View on Serverless Computing](https://www2.eecs.berkeley.edu/Pubs/TechRpts/2019/EECS-2019-3.pdf);
2. Briefly about [Serverless in the Wild: Characterizing and Optimizing the Serverless Workload at a Large Cloud Provider (ATC'20)](https://www.usenix.org/conference/atc20/presentation/shahrad) | 1. [Amazon Lambda](https://aws.amazon.com/lambda/);
2. [Google Cloud Functions](https://cloud.google.com/functions/);
3. [Azure Functions](https://azure.microsoft.com/en-us/services/functions/);
4. [Serverless Computing: Current Trends and Open Problems](https://arxiv.org/pdf/1706.03178.pdf);
5. [Serverless Workflows with Durable Functions and Netherite](https://arxiv.org/pdf/2103.00033.pdf);
6.[Serverless Computing: One Step Forward, Two Steps Back](http://cidrdb.org/cidr2019/papers/p119-hellerstein-cidr19.pdf) | N/A | N/A | N/A | -| APR. 29: 5:00pm PST,
APR. 30: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| MAY. 6: 5:00pm PST,
MAY. 7: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Serverless Computing 2 | [Pocket: Elastic Ephemeral Storage for Serverless Analytics (OSDI'18)](https://www.usenix.org/system/files/osdi18-klimovic.pdf) | 1. Occupy the Cloud: Distributed Computing for the 99% (PyWren);
2. [Encoding, Fast and Slow: Low-Latency Video Processing Using Thousands of Tiny Threads](https://www.usenix.org/conference/nsdi17/technical-sessions/presentation/fouladi);
3. [SAND: Towards High-Performance Serverless Computing](https://www.usenix.org/system/files/conference/atc18/atc18-akkus.pdf);
4. [Encoding, Fast and Slow: Low-Latency Video Processing Using Thousands of Tiny Threads](https://www.usenix.org/conference/nsdi17/technical-sessions/presentation/fouladi);
5. [A Case for Serverless Machine Learning](http://learningsys.org/nips18/assets/papers/101CameraReadySubmissioncirrus_nips_final2.pdf);
6.[Archipelago: A Scalable Low-Latency Serverless Platform](https://arxiv.org/pdf/1911.09849.pdf);
7. [Cloudburst: Stateful Functions-as-a-Service](https://arxiv.org/pdf/2001.04592.pdf) | N/A | N/A | N/A | -| MAY. 13: 5:00pm PST,
MAY. 14: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| MAY. 20: 5:00pm PST,
MAY. 21: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | LibraryOS | [Unikernels: Library Operating Systems for the Cloud (ASPLOS'13)](http://mort.io/publications/pdf/asplos13-unikernels.pdf) | 1. [Unikernels as Processes](https://dl.acm.org/doi/10.1145/3267809.3267845);
2. [Unikernels are unfit for production](https://www.joyent.com/blog/unikernels-are-unfit-for-production);
3. Rethinking the Library OS from the Top-Down;
4. [Mirage OS](https://mirage.io/);
5. [Nabla Containers](https://nabla-containers.github.io/);
6. [ClickOS and the Art of Network Function Virtualization](https://www.usenix.org/system/files/conference/nsdi14/nsdi14-paper-martins.pdf);
7. Libra: a library operating system for a JVM in a virtualized execution environment;
8. Exokernel: an operating system architecture for application-level resource management;
9. [Dune: Safe User-level Access to Privileged CPU Features (OSDI'12)](https://www.usenix.org/system/files/conference/osdi12/osdi12-final-117.pdf) | N/A | N/A | N/A | -| MAY. 27: 5:00pm PST,
MAY. 28: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| JUN. 3: 5:00pm PST,
JUN. 4: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Amazon Firecracker | [Firecracker: Lightweight Virtualization for Serverless Applications (NSDI'20)](https://www.usenix.org/system/files/nsdi20-paper-agache.pdf) | 1. [Amazon Firecracker Git repo](https://firecracker-microvm.github.io/);
2. [Kata Containers](https://katacontainers.io/) | N/A | N/A | N/A | -| JUN. 10: 5:00pm PST,
JUN. 11: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| JUN. 17: 5:00pm PST,
JUN. 18: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Para-Virtualization | [Xen and the Art of Virtualization (SOSP'03)](https://www.cl.cam.ac.uk/research/srg/netos/papers/2003-xensosp.pdf) | 1. [Understanding Full Virtualization, Paravirtualization, and Hardware Assist](https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/VMware_paravirtualization.pdf);
2. [Safe Hardware Access with the Xen Virtual Machine Monitor](https://www.cl.cam.ac.uk/research/srg/netos/papers/2004-safehw-oasis.pdf);
3. [Optimizing Network Virtualization in Xen](https://www.usenix.org/legacy/event/usenix06/tech/menon/menon_html/paper.html);
4.[Measuring CPU Overhead for I/O Processing in the Xen Virtual Machine Monitor](https://www.usenix.org/legacy/publications/library/proceedings/usenix05/tech/general/full_papers/short_papers/cherkasova/cherkasova.pdf);
5. [Breaking Up is Hard to Do: Security and Functionality in a Commodity Hypervisor (SOSP'11)](https://tjd.phlegethon.org/words/sosp11-xoar.pdf) | N/A | N/A | N/A | -| JUN. 24: 5:00pm PST,
JUN. 25: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| JUL. 1: 5:00pm PST,
JUL. 2: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | KVM and QEMU | 1. [kvm: the Linux Virtual Machine Monitor](https://www.kernel.org/doc/ols/2007/ols2007v1-pages-225-230.pdf);
2. [QEMU, a Fast and Portable Dynamic Translator](https://www.usenix.org/legacy/event/usenix05/tech/freenix/full_papers/bellard/bellard.pdf) (It's OK to not fully understand Section 2) | [KVM Documentation](https://www.linux-kvm.org/page/Documents) | N/A | N/A | N/A | -| JUL. 8: 5:00pm PST,
JUL. 9: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| JUL. 15: 5:00pm PST,
JUL. 16: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Security | 1. [When Virtual is Harder than Real: Security Challenges in Virtual Machine Based Computing Environments (HotOS'05)](https://www.usenix.org/legacy/event/hotos05/final_papers/full_papers/garfinkel/garfinkel_old.pdf);
2. [Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds (CCS'09)](https://cseweb.ucsd.edu//~savage/papers/CCS09.pdf) | 1. [Secure Container Isolation: Problem Statement & Solution Space](https://goo.gl/eQHuqo);
2. [When Virtual Is Better Than Real (HotOS'01)](https://www2.cs.duke.edu/courses/cps210/spring06/papers/chen01.pdf);
3. [Secure Pods: Sandboxing workloads in Kubernetes](https://schd.ws/hosted_files/kccnceu18/96/Secure%20Pods%20-%20KubeCon%20EU%202018.pdf);
4. TrustVisor: Efficient TCB Reduction and Attestation;
5. [SecVisor: A Tiny Hypervisor to Provide Lifetime Kernel Code Integrity for Commodity OSes (SOSP'07)](https://www.cs.cmu.edu/~arvinds/pubs/secvisor.pdf);
6. [Breaking Up is Hard to Do: Security and Functionality in a Commodity Hypervisor (SOSP'11)](https://tjd.phlegethon.org/words/sosp11-xoar.pdf);
7. [InkTag: Secure Applications on an Untrusted Operating System (ASPLOS'13)](http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.435.4999&rep=rep1&type=pdf);
8. [Overshadow: A Virtualization-Based Approach to Retrofitting Protection in Commodity Operating Systems](https://www.cs.utexas.edu/~shmat/courses/cs380s/overshadow.pdf);
9. VirtuOS: An Operating System with Kernel Virtualization;
10. SCONE: Secure Linux Containers with Intel SGX;
11. [Understanding Security Implications of Using Containers in the Cloud (ASPLOS'08)](https://www.usenix.org/system/files/conference/atc17/atc17-tak-paper.pdf);
12. [Container Security: Issues, Challenges, and the Road Ahead](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8693491) | N/A | N/A | N/A | -| JUL. 22: 5:00pm PST,
JUL. 23: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| JUL. 29: 5:00pm PST,
JUL. 30: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Virtualizing non-CPU Processors (Accelerators) | 1. [GPU Virtualization on VMware’s Hosted I/O Architecture](https://www.usenix.org/legacy/event/wiov08/tech/full_papers/dowty/dowty.pdf);
2. [Do OS abstractions make sense on FPGAs? (OSDI'20)](https://www.usenix.org/conference/osdi20/presentation/roscoe) | 1. [AvA: Accelerated Virtualization of Accelerators](https://oscarlab.github.io/papers/ava-asplos20.pdf);
2. [A Full GPU Virtualization Solution with Mediated Pass-Through (ATC'14)](https://www.usenix.org/system/files/conference/atc14/atc14-paper-tian.pdf);
3. [Sharing, Protection and Compatibility for Reconfigurable Fabric with AmorphOS (OSDI'18)](https://www.usenix.org/system/files/osdi18-khawaja.pdf);
4. [Accelerating & Optimizing HPC/ML on vSphere Leveraging NVIDIA GPU (2019/02 talk)](http://www.hpcadvisorycouncil.com/events/2019/stanford-workshop/pdf/DayTwo_Friday_15Feb_2019/M_Pothari_MachineLearning_VMWare_Friday_02152019.pdf);
5. [GPUvm: Why Not Virtualizing GPUs at the Hypervisor? (ATC'14)](https://pdfs.semanticscholar.org/cffc/3c4e332287ba5b67a20c0bf0fbcb8a6e5725.pdf);
6. [PTask: Operating System Abstractions To Manage GPUs as Compute Devices (SOSP'11)](http://www.cs.utexas.edu/users/rossbach/pubs/sosp11rossbach.pdf) | N/A | N/A | N/A | -| AUG. 5: 5:00pm PST,
AUG. 6: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| AUG. 12: 5:00pm PST,
AUG. 13: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | New Cloud Infrastructure | [Amazon Nitro](https://aws.amazon.com/ec2/nitro/) (esp. the video talk on that page) | [Intel Unveils Infrastructure Processing Unit](https://www.intel.com/content/www/us/en/newsroom/news/infrastructure-processing-unit-data-center.html#gs.rapfq2) | N/A | N/A | N/A | -| AUG. 19: 5:00pm PST,
AUG. 20: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | -| AUG. 26: 5:00pm PST,
AUG. 27: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Course Summary | [Hints for Computer System Design - Butler Lampson](https://www.microsoft.com/en-us/research/wp-content/uploads/2016/02/acrobat-17.pdf) | N/A | N/A | N/A | N/A | -| SEP. 2: 5:00pm PST,
SEP. 3: 8:00am CST,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Meetup Wrapup | N/A | N/A | N/A | N/A | N/A | +| JAN. 22: 5:00pm PST,
JAN. 23: 9:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Administrative | N/A | N/A | Mossaka & Wen | N/A | N/A | +| JAN. 29: 5:00pm PST,
JAN. 30: 9:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Background and Virtualization | [Comet Book Chapter on Virtual Machine Monitors](http://pages.cs.wisc.edu/~remzi/OSTEP/vmm-intro.pdf) | 1. Formal Requirements for Virtualizable Third Generation Architectures (Comm ACM 1974);
2. Disco: Running Commodity Operating Systems on Scalable Multiprocessors (TOCS'97);
3. Scale and Performance in the Denali Isolation Kernel | N/A | N/A | N/A | +| FEB. 5: 5:00pm PST,
FEB. 5: 9:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| FEB. 12: 5:00pm PST,
FEB. 13: 9:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Virtulization CPU | [A Comparison of Software and Hardware Techniques for x86 Virtualization (ASPLOS'06)](https://pdos.csail.mit.edu/6.828/2018/readings/adams06vmware.pdf) | 1. [The Evolution of an x86 Virtual Machine Monitor](http://course.ece.cmu.edu/~ece845/docs/vmware-evolution.pdf);
2. Software Techniques for Avoiding Hardware Virtualization Exits;
3. Embra: Fast and Flexible Machine Simulation;
4. Fast Dynamic Binary Translation for the Kernel;
5. Enabling Intel Virtualization Technology Features and Benefits | N/A | N/A | N/A | +| FEB. 19: 5:00pm PST,
FEB. 20: 9:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| FEB. 26: 5:00pm PST,
FEB. 27: 9:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Virtualization Memory | 1. The first three pages of [Performance Evaluation of Intel EPT Hardware Assist](https://www.vmware.com/pdf/Perf_ESX_Intel-EPT-eval.pdf);
2. At least the first four sections of [Memory Resource Management in VMware ESX Server (OSDI'02)](https://www.vmware.com/pdf/usenix_resource_mgmt.pdf) | Difference Engine: Harnessing Memory Redundancy in Virtual Machines | N/A | N/A | N/A | +| MAR. 4: 5:00pm PST,
MAR. 5: 9:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| MAR. 11: 5:00pm PST,
MAR. 12: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Virtualization I/O | 1. First three sections of [virtio: Towards a De-Facto Standard For Virtual I/O Devices](https://ozlabs.org/~rusty/virtio-spec/virtio-paper.pdf);
2. First three sections of [High Performance Network Virtualization with SR-IOV](http://zhenxiao.com/read/SR-IOV.pdf);
3. [Network Virtualization Overview](https://sdn.systemsapproach.org/netvirt.html) | 1. vIC: Interrupt Coalescing for Virtual Machine Storage Device IO;
2. ELI: Bare-Metal Performance for I/O Virtualization;
3. [Virtualizing I/O Devices on VMware Workstation's Hosted Virtual Machine Monitor (ATC'01)](https://www.vmware.com/pdf/usenix_io_devices.pdf);
4. [Network Virtualization in Multi-tenant Datacenters (NSDI'14)](https://www.usenix.org/conference/nsdi14/technical-sessions/presentation/koponen);
5. [The Design and Implementation of Open vSwitch (NSDI'15)](https://www.openvswitch.org/support/papers/nsdi2015.pdf%20target=) | N/A | N/A | N/A | +| MAR. 18: 5:00pm PST,
MAR. 19: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| MAR. 25: 5:00pm PST,
MAR. 26: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Container Basics | [Understanding and Hardening Linux Containers](https://research.nccgroup.com/wp-content/uploads/2020/07/ncc_group_understanding_hardening_linux_containers-1-1.pdf) (mainly Ch 2 to Ch 5; you can ignore many of the details in these chapters. Read Ch 1 for more background on virtualization. Read other chapters if you are interested in security.) | 1. [LXC/LXD](https://linuxcontainers.org/);
2. [Docker](https://docs.docker.com/engine/docker-overview/);
3. [Understanding Security Implications of Using Containers in the Cloud](https://www.usenix.org/system/files/conference/atc17/atc17-tak-paper.pdf)
4. [Container Security: Issues, Challenges, and the Road Ahead](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8693491);
5. [Slacker: Fast Distribution with Lazy Docker Containers](https://www.usenix.org/node/194431) | N/A | N/A | N/A | +| APR. 1: 5:00pm PST,
APR. 2: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| APR. 8: 5:00pm PST,
APR. 9: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Kubernetes and gVisor | [Kubernetes](https://kubernetes.io/docs/tutorials/kubernetes-basics/) and [gVisor](https://gvisor.dev/docs) | 1. [Borg, Omega, and Kubernetes (Google)](https://storage.googleapis.com/pub-tools-public-publication-data/pdf/44843.pdf);
2. [The True Cost of Containing: A gVisor Case Study](https://www.usenix.org/system/files/hotcloud19-paper-young.pdf);
3. [Container Isolation at Scale (Introducing gVisor) - Dawn Chen & Zhengyu He, Google](https://www.youtube.com/watch?v=pWyJahTWa4I);
4. [Nabla Containers](https://nabla-containers.github.io/) | N/A | N/A | N/A | +| APR. 15: 5:00pm PST,
APR. 16: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| APR. 22: 5:00pm PST,
APR. 23: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Serverless Computing | 1. Pages 3 to 8 of [Cloud Programming Simplified: A Berkeley View on Serverless Computing](https://www2.eecs.berkeley.edu/Pubs/TechRpts/2019/EECS-2019-3.pdf);
2. Briefly about [Serverless in the Wild: Characterizing and Optimizing the Serverless Workload at a Large Cloud Provider (ATC'20)](https://www.usenix.org/conference/atc20/presentation/shahrad) | 1. [Amazon Lambda](https://aws.amazon.com/lambda/);
2. [Google Cloud Functions](https://cloud.google.com/functions/);
3. [Azure Functions](https://azure.microsoft.com/en-us/services/functions/);
4. [Serverless Computing: Current Trends and Open Problems](https://arxiv.org/pdf/1706.03178.pdf);
5. [Serverless Workflows with Durable Functions and Netherite](https://arxiv.org/pdf/2103.00033.pdf);
6.[Serverless Computing: One Step Forward, Two Steps Back](http://cidrdb.org/cidr2019/papers/p119-hellerstein-cidr19.pdf) | N/A | N/A | N/A | +| APR. 29: 5:00pm PST,
APR. 30: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| MAY. 6: 5:00pm PST,
MAY. 7: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Serverless Computing 2 | [Pocket: Elastic Ephemeral Storage for Serverless Analytics (OSDI'18)](https://www.usenix.org/system/files/osdi18-klimovic.pdf) | 1. Occupy the Cloud: Distributed Computing for the 99% (PyWren);
2. [Encoding, Fast and Slow: Low-Latency Video Processing Using Thousands of Tiny Threads](https://www.usenix.org/conference/nsdi17/technical-sessions/presentation/fouladi);
3. [SAND: Towards High-Performance Serverless Computing](https://www.usenix.org/system/files/conference/atc18/atc18-akkus.pdf);
4. [Encoding, Fast and Slow: Low-Latency Video Processing Using Thousands of Tiny Threads](https://www.usenix.org/conference/nsdi17/technical-sessions/presentation/fouladi);
5. [A Case for Serverless Machine Learning](http://learningsys.org/nips18/assets/papers/101CameraReadySubmissioncirrus_nips_final2.pdf);
6.[Archipelago: A Scalable Low-Latency Serverless Platform](https://arxiv.org/pdf/1911.09849.pdf);
7. [Cloudburst: Stateful Functions-as-a-Service](https://arxiv.org/pdf/2001.04592.pdf) | N/A | N/A | N/A | +| MAY. 13: 5:00pm PST,
MAY. 14: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| MAY. 20: 5:00pm PST,
MAY. 21: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | LibraryOS | [Unikernels: Library Operating Systems for the Cloud (ASPLOS'13)](http://mort.io/publications/pdf/asplos13-unikernels.pdf) | 1. [Unikernels as Processes](https://dl.acm.org/doi/10.1145/3267809.3267845);
2. [Unikernels are unfit for production](https://www.joyent.com/blog/unikernels-are-unfit-for-production);
3. Rethinking the Library OS from the Top-Down;
4. [Mirage OS](https://mirage.io/);
5. [Nabla Containers](https://nabla-containers.github.io/);
6. [ClickOS and the Art of Network Function Virtualization](https://www.usenix.org/system/files/conference/nsdi14/nsdi14-paper-martins.pdf);
7. Libra: a library operating system for a JVM in a virtualized execution environment;
8. Exokernel: an operating system architecture for application-level resource management;
9. [Dune: Safe User-level Access to Privileged CPU Features (OSDI'12)](https://www.usenix.org/system/files/conference/osdi12/osdi12-final-117.pdf) | N/A | N/A | N/A | +| MAY. 27: 5:00pm PST,
MAY. 28: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| JUN. 3: 5:00pm PST,
JUN. 4: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Amazon Firecracker | [Firecracker: Lightweight Virtualization for Serverless Applications (NSDI'20)](https://www.usenix.org/system/files/nsdi20-paper-agache.pdf) | 1. [Amazon Firecracker Git repo](https://firecracker-microvm.github.io/);
2. [Kata Containers](https://katacontainers.io/) | N/A | N/A | N/A | +| JUN. 10: 5:00pm PST,
JUN. 11: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| JUN. 17: 5:00pm PST,
JUN. 18: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Para-Virtualization | [Xen and the Art of Virtualization (SOSP'03)](https://www.cl.cam.ac.uk/research/srg/netos/papers/2003-xensosp.pdf) | 1. [Understanding Full Virtualization, Paravirtualization, and Hardware Assist](https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/VMware_paravirtualization.pdf);
2. [Safe Hardware Access with the Xen Virtual Machine Monitor](https://www.cl.cam.ac.uk/research/srg/netos/papers/2004-safehw-oasis.pdf);
3. [Optimizing Network Virtualization in Xen](https://www.usenix.org/legacy/event/usenix06/tech/menon/menon_html/paper.html);
4.[Measuring CPU Overhead for I/O Processing in the Xen Virtual Machine Monitor](https://www.usenix.org/legacy/publications/library/proceedings/usenix05/tech/general/full_papers/short_papers/cherkasova/cherkasova.pdf);
5. [Breaking Up is Hard to Do: Security and Functionality in a Commodity Hypervisor (SOSP'11)](https://tjd.phlegethon.org/words/sosp11-xoar.pdf) | N/A | N/A | N/A | +| JUN. 24: 5:00pm PST,
JUN. 25: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| JUL. 1: 5:00pm PST,
JUL. 2: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | KVM and QEMU | 1. [kvm: the Linux Virtual Machine Monitor](https://www.kernel.org/doc/ols/2007/ols2007v1-pages-225-230.pdf);
2. [QEMU, a Fast and Portable Dynamic Translator](https://www.usenix.org/legacy/event/usenix05/tech/freenix/full_papers/bellard/bellard.pdf) (It's OK to not fully understand Section 2) | [KVM Documentation](https://www.linux-kvm.org/page/Documents) | N/A | N/A | N/A | +| JUL. 8: 5:00pm PST,
JUL. 9: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| JUL. 15: 5:00pm PST,
JUL. 16: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Security | 1. [When Virtual is Harder than Real: Security Challenges in Virtual Machine Based Computing Environments (HotOS'05)](https://www.usenix.org/legacy/event/hotos05/final_papers/full_papers/garfinkel/garfinkel_old.pdf);
2. [Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds (CCS'09)](https://cseweb.ucsd.edu//~savage/papers/CCS09.pdf) | 1. [Secure Container Isolation: Problem Statement & Solution Space](https://goo.gl/eQHuqo);
2. [When Virtual Is Better Than Real (HotOS'01)](https://www2.cs.duke.edu/courses/cps210/spring06/papers/chen01.pdf);
3. [Secure Pods: Sandboxing workloads in Kubernetes](https://schd.ws/hosted_files/kccnceu18/96/Secure%20Pods%20-%20KubeCon%20EU%202018.pdf);
4. TrustVisor: Efficient TCB Reduction and Attestation;
5. [SecVisor: A Tiny Hypervisor to Provide Lifetime Kernel Code Integrity for Commodity OSes (SOSP'07)](https://www.cs.cmu.edu/~arvinds/pubs/secvisor.pdf);
6. [Breaking Up is Hard to Do: Security and Functionality in a Commodity Hypervisor (SOSP'11)](https://tjd.phlegethon.org/words/sosp11-xoar.pdf);
7. [InkTag: Secure Applications on an Untrusted Operating System (ASPLOS'13)](http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.435.4999&rep=rep1&type=pdf);
8. [Overshadow: A Virtualization-Based Approach to Retrofitting Protection in Commodity Operating Systems](https://www.cs.utexas.edu/~shmat/courses/cs380s/overshadow.pdf);
9. VirtuOS: An Operating System with Kernel Virtualization;
10. SCONE: Secure Linux Containers with Intel SGX;
11. [Understanding Security Implications of Using Containers in the Cloud (ASPLOS'08)](https://www.usenix.org/system/files/conference/atc17/atc17-tak-paper.pdf);
12. [Container Security: Issues, Challenges, and the Road Ahead](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8693491) | N/A | N/A | N/A | +| JUL. 22: 5:00pm PST,
JUL. 23: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| JUL. 29: 5:00pm PST,
JUL. 30: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Virtualizing non-CPU Processors (Accelerators) | 1. [GPU Virtualization on VMware’s Hosted I/O Architecture](https://www.usenix.org/legacy/event/wiov08/tech/full_papers/dowty/dowty.pdf);
2. [Do OS abstractions make sense on FPGAs? (OSDI'20)](https://www.usenix.org/conference/osdi20/presentation/roscoe) | 1. [AvA: Accelerated Virtualization of Accelerators](https://oscarlab.github.io/papers/ava-asplos20.pdf);
2. [A Full GPU Virtualization Solution with Mediated Pass-Through (ATC'14)](https://www.usenix.org/system/files/conference/atc14/atc14-paper-tian.pdf);
3. [Sharing, Protection and Compatibility for Reconfigurable Fabric with AmorphOS (OSDI'18)](https://www.usenix.org/system/files/osdi18-khawaja.pdf);
4. [Accelerating & Optimizing HPC/ML on vSphere Leveraging NVIDIA GPU (2019/02 talk)](http://www.hpcadvisorycouncil.com/events/2019/stanford-workshop/pdf/DayTwo_Friday_15Feb_2019/M_Pothari_MachineLearning_VMWare_Friday_02152019.pdf);
5. [GPUvm: Why Not Virtualizing GPUs at the Hypervisor? (ATC'14)](https://pdfs.semanticscholar.org/cffc/3c4e332287ba5b67a20c0bf0fbcb8a6e5725.pdf);
6. [PTask: Operating System Abstractions To Manage GPUs as Compute Devices (SOSP'11)](http://www.cs.utexas.edu/users/rossbach/pubs/sosp11rossbach.pdf) | N/A | N/A | N/A | +| AUG. 5: 5:00pm PST,
AUG. 6: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| AUG. 12: 5:00pm PST,
AUG. 13: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | New Cloud Infrastructure | [Amazon Nitro](https://aws.amazon.com/ec2/nitro/) (esp. the video talk on that page) | [Intel Unveils Infrastructure Processing Unit](https://www.intel.com/content/www/us/en/newsroom/news/infrastructure-processing-unit-data-center.html#gs.rapfq2) | N/A | N/A | N/A | +| AUG. 19: 5:00pm PST,
AUG. 20: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | +| AUG. 26: 5:00pm PST,
AUG. 27: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Course Summary | [Hints for Computer System Design - Butler Lampson](https://www.microsoft.com/en-us/research/wp-content/uploads/2016/02/acrobat-17.pdf) | N/A | N/A | N/A | N/A | +| SEP. 2: 5:00pm PST,
SEP. 3: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Meetup Wrapup | N/A | N/A | N/A | N/A | N/A |